System and method for transitioning between an autonomous and manual driving mode based on detection of a drivers capacity to control a vehicle

ABSTRACT

A system and method for transitioning between an autonomous and manual driving mode based on detection of a driver&#39;s capacity to control a vehicle are disclosed. A particular embodiment includes: receiving sensor data related to a vehicle driver&#39;s capacity to take manual control of an autonomous vehicle; determining, based on the sensor data, if the driver has the capacity to take manual control of the autonomous vehicle, the determining including prompting the driver to perform an action or provide an input; and outputting a vehicle control transition signal to a vehicle subsystem to cause the vehicle subsystem to take action based on the driver&#39;s capacity to take manual control of the autonomous vehicle.

COPYRIGHT NOTICE

A portion of the disclosure of this patent document contains material that is subject to copyright protection. The copyright owner has no objection to the facsimile reproduction by anyone of the patent document or the patent disclosure, as it appears in the U.S. Patent and Trademark Office patent files or records, but otherwise reserves all copyright rights whatsoever. The following notice applies to the disclosure herein and to the drawings that form a part of this document: Copyright 2016-2017, TuSimple, All Rights Reserved.

TECHNICAL FIELD

This patent document pertains generally to tools (systems, apparatuses, methodologies, computer program products, etc.) for vehicle trajectory generation or trajectory planning, vehicle control systems, and autonomous driving systems, and more particularly, but not by way of limitation, to a system and method for transitioning between an autonomous and manual driving mode based on detection of a driver's capacity to control a vehicle.

BACKGROUND

Autonomous vehicles use various computing systems to aid in the autonomous control of a vehicle. Some autonomous vehicles may require some initial input or continuous input from an operator, such as a pilot, driver, or passenger. Other systems, for example autopilot systems, may be used only when the system has been engaged, which permits the operator to switch from a manual mode (where the operator exercises a high degree of control over the movement of the vehicle) to an autonomous mode (where the vehicle essentially drives itself) to modes that lie somewhere in between. However, conventional systems cannot render a smooth, yet safe transition between an autonomous driving mode and a driver-controlled driving mode. In particular, conventional systems cannot implicitly initiate a transition of control without the driver explicitly forcing control away from the autonomous vehicle control system.

SUMMARY

A system and method for transitioning between an autonomous and manual driving mode based on detection of a driver's capacity to control a vehicle is disclosed herein. In particular, the method and system include providing a controlled transition between driving modes in an autonomous vehicle, wherein the modes transition between an autonomous driving mode and a manual driving mode according to detection data corresponding to the user's (e.g., driver's) capacity or fitness to manually control the vehicle. The system may include cameras, sensors, an interactive device, and a computing device. Cameras may be mounted within/on autonomous vehicles to monitor the user/driver's facial features and activities and to collect image and facial feature data. The system may also provide steering wheel sensors to capture real-time steering patterns, as well as localization sensors monitoring the vehicle's location and movement. The system may prompt the user/driver with instructions to perform certain actions. The instructions may be given to the user/driver through an interactive device, for example, a sound device or dashboard display screen. The computing device analyzes the user/driver's responses to the interactive prompted instructions with a process for categorizing the user/driver's current activity into predefined classes or states. For example, the predefined classes or states can include sleeping, speaking on the phone, etc. The state classification is performed by an example embodiment based on the user/driver's facial analysis and the user/driver's responses to the prompted instructions. As a result, the user/driver's capacity to take control of the vehicle can be evaluated and determined. The user/driver may be allowed to take control of the vehicle based on the evaluation of the user/driver's capacity as determined by the example embodiment. Other measures for securing the safety of the user/driver and the vehicle may also be taken based on the evaluation of the user/driver's capacity to control the vehicle.

BRIEF DESCRIPTION OF THE DRAWINGS

The various embodiments are illustrated by way of example, and not by way of limitation, in the figures of the accompanying drawings in which:

FIG. 1 illustrates a block diagram of an example ecosystem in which a driving control transition module of an example embodiment can be implemented;

FIG. 2 illustrates the components of the driving control transition system of an example embodiment;

FIG. 3 illustrates an example of a steering wheel that may be used in an autonomous vehicle in which manual control by a driver can be provided by an example embodiment;

FIG. 4 is a process flow diagram illustrating an example embodiment of a system and method for transitioning between an autonomous and manual driving mode based on detection of a driver's capacity to control a vehicle; and

FIG. 5 shows a diagrammatic representation of machine in the example form of a computer system within which a set of instructions when executed may cause the machine to perform any one or more of the methodologies discussed herein.

DETAILED DESCRIPTION

In the following description, for purposes of explanation, numerous specific details are set forth in order to provide a thorough understanding of the various embodiments. It will be evident, however, to one of ordinary skill in the art that the various embodiments may be practiced without these specific details.

As described in various example embodiments, a system and method for transitioning between an autonomous and manual driving mode based on detection of a driver's capacity to control a vehicle are described herein. An example embodiment disclosed herein can be used in the context of an in-vehicle control system 150 in a vehicle ecosystem 101. In one example embodiment, an in-vehicle control system 150 with a driving control transition module 200 resident in a vehicle 105 can be configured like the architecture and ecosystem 101 illustrated in FIG. 1. However, it will be apparent to those of ordinary skill in the art that the driving control transition module 200 described and claimed herein can be implemented, configured, and used in a variety of other applications and systems as well.

Referring now to FIG. 1, a block diagram illustrates an example ecosystem 101 in which an in-vehicle control system 150 and a driving control transition module 200 of an example embodiment can be implemented. These components are described in more detail below. Ecosystem 101 includes a variety of systems and components that can generate and/or deliver one or more sources of information/data and related services to the in-vehicle control system 150 and the driving control transition module 200, which can be installed in the vehicle 105. For example, a camera installed in the vehicle 105, as one of the devices of vehicle subsystems 140, can generate image and timing data that can be received by the in-vehicle control system 150. At least one of the cameras can be positioned in an inward-facing manner to view the vehicle driver's head and face and to capture images of the driver's facial features over time. The in-vehicle control system 150 and an image processing module executing therein can receive this image and timing data input. The image processing module can extract sensor data from the devices of vehicle subsystems 140 and the image and timing data to monitor the driver of the vehicle and to identify features of the driver's face. As described in more detail below, the driving control transition module 200 can process the sensor data and driver facial feature data and generate a determination of the driver's capacity or fitness to take control of the vehicle. The determination of the driver's capacity or fitness can be used by an autonomous vehicle control subsystem, as another one of the subsystems of vehicle subsystems 140. The autonomous vehicle control subsystem, for example, can use the determination of the driver's capacity or fitness to safely and efficiently perform vehicle control operations and navigate the vehicle 105 through a real world driving environment while avoiding obstacles and safely controlling the vehicle.

In an example embodiment as described herein, the in-vehicle control system 150 can be in data communication with a plurality of vehicle subsystems 140, all of which can be resident in a user's vehicle 105. A vehicle subsystem interface 141 is provided to facilitate data communication between the in-vehicle control system 150 and the plurality of vehicle subsystems 140. The in-vehicle control system 150 can be configured to include a data processor 171 to execute the driving control transition module 200 for processing sensor data and driver facial feature data received from one or more of the vehicle subsystems 140. The data processor 171 can be combined with a data storage device 172 as part of a computing system 170 in the in-vehicle control system 150. The data storage device 172 can be used to store data, processing parameters, and data processing instructions. A processing module interface 165 can be provided to facilitate data communications between the data processor 171 and the driving control transition module 200. In various example embodiments, a plurality of processing modules, configured similarly to driving control transition module 200, can be provided for execution by data processor 171. As shown by the dashed lines in FIG. 1, the driving control transition module 200 can be integrated into the in-vehicle control system 150, optionally downloaded to the in-vehicle control system 150, or deployed separately from the in-vehicle control system 150.

The in-vehicle control system 150 can be configured to receive or transmit data from/to a wide-area network 120 and network resources 122 connected thereto. An in-vehicle web-enabled device 130 and/or a user mobile device 132 can be used to communicate via network 120. A web-enabled device interface 131 can be used by the in-vehicle control system 150 to facilitate data communication between the in-vehicle control system 150 and the network 120 via the in-vehicle web-enabled device 130. Similarly, a user mobile device interface 133 can be used by the in-vehicle control system 150 to facilitate data communication between the in-vehicle control system 150 and the network 120 via the user mobile device 132. In this manner, the in-vehicle control system 150 can obtain real-time access to network resources 122 via network 120. The network resources 122 can be used to obtain processing modules for execution by data processor 171, data content to train internal neural networks, system parameters, or other data.

The ecosystem 101 can include a wide area data network 120. The network 120 represents one or more conventional wide area data networks, such as the Internet, a cellular telephone network, satellite network, pager network, a wireless broadcast network, gaming network, WiFi network, peer-to-peer network, Voice over IP (VoIP) network, etc. One or more of these networks 120 can be used to connect a user or client system with network resources 122, such as websites, servers, central control sites, or the like. The network resources 122 can generate and/or distribute data, which can be received in vehicle 105 via in-vehicle web-enabled devices 130 or user mobile devices 132. The network resources 122 can also host network cloud services, which can support the functionality used to compute or assist in processing object input or object input analysis. Antennas can serve to connect the in-vehicle control system 150 and the driving control transition module 200 with the data network 120 via cellular, satellite, radio, or other conventional signal reception mechanisms. Such cellular data networks are currently available (e.g., Verizon™, AT&T™, T-Mobile™, etc.). Such satellite-based data or content networks are also currently available (e.g., SiriusXM™, HughesNet™, etc.). The conventional broadcast networks, such as AM/FM radio networks, pager networks, UHF networks, gaming networks, WiFi networks, peer-to-peer networks, Voice over IP (VoIP) networks, and the like are also well-known. Thus, as described in more detail below, the in-vehicle control system 150 and the driving control transition module 200 can receive web-based data or content via an in-vehicle web-enabled device interface 131, which can be used to connect with the in-vehicle web-enabled device receiver 130 and network 120. In this manner, the in-vehicle control system 150 and the driving control transition module 200 can support a variety of network-connectable in-vehicle devices and systems from within a vehicle 105.

As shown in FIG. 1, the in-vehicle control system 150 and the driving control transition module 200 can also receive input data, processing control parameters, and training content from user mobile devices 132, which can be located inside or proximately to the vehicle 105. The user mobile devices 132 can represent standard mobile devices, such as cellular phones, smartphones, personal digital assistants (PDA's), MP3 players, tablet computing devices (e.g., iPad™), laptop computers, CD players, and other mobile devices, which can produce, receive, and/or deliver data, processing control parameters, and content for the in-vehicle control system 150 and the driving control transition module 200. As shown in FIG. 1, the mobile devices 132 can also be in data communication with the network cloud 120. The mobile devices 132 can source data and content from internal memory components of the mobile devices 132 themselves or from network resources 122 via network 120. Additionally, mobile devices 132 can themselves include a GPS data receiver, accelerometers, WiFi triangulation, or other geo-location sensors or components in the mobile device, which can be used to determine the real-time geo-location of the user (via the mobile device) at any moment in time. In any case, the in-vehicle control system 150 and the driving control transition module 200 can receive data from the mobile devices 132 as shown in FIG. 1.

Referring still to FIG. 1, the example embodiment of ecosystem 101 can include vehicle operational subsystems 140. For embodiments that are implemented in a vehicle 105, many standard vehicles include operational subsystems, such as electronic control units (ECUs), supporting monitoring/control subsystems for the engine, brakes, transmission, electrical system, emissions system, interior environment, and the like. For example, data signals communicated from the vehicle operational subsystems 140 (e.g., ECUs of the vehicle 105) to the in-vehicle control system 150 via vehicle subsystem interface 141 may include information about the state of one or more of the components or subsystems of the vehicle 105. In particular, the data signals, which can be communicated from the vehicle operational subsystems 140 to a Controller Area Network (CAN) bus of the vehicle 105, can be received and processed by the in-vehicle control system 150 via vehicle subsystem interface 141. Embodiments of the systems and methods described herein can be used with substantially any mechanized system that uses a CAN bus or similar data communications bus as defined herein, including, but not limited to, industrial equipment, boats, trucks, machinery, or automobiles; thus, the term “vehicle” as used herein can include any such mechanized systems. Embodiments of the systems and methods described herein can also be used with any systems employing some form of network data communications; however, such network communications are not required.

Referring still to FIG. 1, the example embodiment of ecosystem 101, and the vehicle operational subsystems 140 therein, can include a variety of vehicle subsystems in support of the operation of vehicle 105. In general, the vehicle 105 may take the form of a car, truck, motorcycle, bus, boat, airplane, helicopter, lawn mower, earth mover, snowmobile, aircraft, recreational vehicle, amusement park vehicle, farm equipment, construction equipment, tram, golf cart, train, and trolley, for example. Other vehicles are possible as well. The vehicle 105 may be configured to operate fully or partially in an autonomous mode. For example, the vehicle 105 may control itself while in the autonomous mode, and may be operable to determine a current state of the vehicle and its environment, determine a predicted behavior of at least one other vehicle in the environment, determine a confidence level that may correspond to a likelihood of the at least one other vehicle to perform the predicted behavior, and control the vehicle 105 based on the determined information. While in autonomous mode, the vehicle 105 may be configured to operate without human interaction or control.

The vehicle 105 may include various vehicle subsystems such as a vehicle drive subsystem 142, vehicle sensor subsystem 144, vehicle control subsystem 146, and occupant interface subsystem 148. As described above, the vehicle 105 may also include the in-vehicle control system 150, the computing system 170, and the driving control transition module 200. The vehicle 105 may include more or fewer subsystems and each subsystem could include multiple elements. Further, each of the subsystems and elements of vehicle 105 could be interconnected. Thus, one or more of the described functions of the vehicle 105 may be divided up into additional functional or physical components or combined into fewer functional or physical components. In some further examples, additional functional and physical components may be added to the examples illustrated by FIG. 1.

The vehicle drive subsystem 142 may include components operable to provide powered motion for the vehicle 105. In an example embodiment, the vehicle drive subsystem 142 may include an engine or motor, wheels/tires, a transmission, an electrical subsystem, and a power source. The engine or motor may be any combination of an internal combustion engine, an electric motor, steam engine, fuel cell engine, propane engine, or other types of engines or motors. In some example embodiments, the engine may be configured to convert a power source into mechanical energy. In some example embodiments, the vehicle drive subsystem 142 may include multiple types of engines or motors. For instance, a gas-electric hybrid car could include a gasoline engine and an electric motor. Other examples are possible.

The wheels of the vehicle 105 may be standard tires. The wheels of the vehicle 105 may be configured in various formats, including a unicycle, bicycle, tricycle, or a four-wheel format, such as on a car or a truck, for example. Other wheel geometries are possible, such as those including six or more wheels. Any combination of the wheels of vehicle 105 may be operable to rotate differentially with respect to other wheels. The wheels may represent at least one wheel that is fixedly attached to the transmission and at least one tire coupled to a rim of the wheel that could make contact with the driving surface. The wheels may include a combination of metal and rubber, or another combination of materials. The transmission may include elements that are operable to transmit mechanical power from the engine to the wheels. For this purpose, the transmission could include a gearbox, a clutch, a differential, and drive shafts. The transmission may include other elements as well. The drive shafts may include one or more axles that could be coupled to one or more wheels. The electrical system may include elements that are operable to transfer and control electrical signals in the vehicle 105. These electrical signals can be used to activate lights, servos, electrical motors, and other electrically driven or controlled devices of the vehicle 105. The power source may represent a source of energy that may, in full or in part, power the engine or motor. That is, the engine or motor could be configured to convert the power source into mechanical energy. Examples of power sources include gasoline, diesel, other petroleum-based fuels, propane, other compressed gas-based fuels, ethanol, fuel cell, solar panels, batteries, and other sources of electrical power. The power source could additionally or alternatively include any combination of fuel tanks, batteries, capacitors, or flywheels. The power source may also provide energy for other subsystems of the vehicle 105.

The vehicle sensor subsystem 144 may include a number of sensors configured to sense information about an environment or condition of the vehicle 105. For example, the vehicle sensor subsystem 144 may include an inertial measurement unit (IMU), a Global Positioning System (GPS) transceiver, a RADAR unit, a laser range finder/LIDAR unit, and one or more cameras or image capture devices. The vehicle sensor subsystem 144 may also include sensors configured to monitor internal systems of the vehicle 105 (e.g., a steering wheel position, movement, or pressure, an 02 monitor, a fuel gauge, an engine oil temperature, etc.). Other sensors are possible as well. One or more of the sensors included in the vehicle sensor subsystem 144 may be configured to be actuated separately or collectively in order to modify a position, an orientation, or both, of the one or more sensors. Other sensors of the sensors included in the vehicle sensor subsystem 144 may include an input device with which a user may activate a button, speak an utterance, move a lever or pedal, or otherwise indicate an input signal.

The IMU may include any combination of sensors (e.g., accelerometers and gyroscopes) configured to sense position and orientation changes of the vehicle 105 based on inertial acceleration. The GPS transceiver may be any sensor configured to estimate a geographic location of the vehicle 105. For this purpose, the GPS transceiver may include a receiver/transmitter operable to provide information regarding the position of the vehicle 105 with respect to the Earth. The RADAR unit may represent a system that utilizes radio signals to sense objects within the local environment of the vehicle 105. In some embodiments, in addition to sensing the objects, the RADAR unit may additionally be configured to sense the speed and the heading of the objects proximate to the vehicle 105. The laser range finder or LIDAR unit may be any sensor configured to sense objects in the environment in which the vehicle 105 is located using lasers. In an example embodiment, the laser range finder/LIDAR unit may include one or more laser sources, a laser scanner, and one or more detectors, among other system components. The laser range finder/LIDAR unit could be configured to operate in a coherent (e.g., using heterodyne detection) or an incoherent detection mode. The cameras may include one or more devices configured to capture a plurality of images of the environment of the vehicle 105. The cameras may be still image cameras or motion video cameras.

The vehicle control system 146 may be configured to control operation of the vehicle 105 and its components. Accordingly, the vehicle control system 146 may include various elements such as a steering unit, a throttle, a brake unit, a navigation unit, and an autonomous control unit.

The steering unit may represent any combination of mechanisms that may be operable to adjust the heading of vehicle 105. As described above, the steering wheel may include a sensor to detect position or movement of the steering wheel or a level of pressure on the steering wheel. The throttle may be configured to control, for instance, the operating speed of the engine and, in turn, control the speed of the vehicle 105. The brake unit can include any combination of mechanisms configured to decelerate the vehicle 105. The brake unit can use friction to slow the wheels in a standard manner. In other embodiments, the brake unit may convert the kinetic energy of the wheels to electric current. The brake unit may take other forms as well. The navigation unit may be any system configured to determine a driving path or route for the vehicle 105. The navigation unit may additionally be configured to update the driving path dynamically while the vehicle 105 is in operation. In some embodiments, the navigation unit may be configured to incorporate data from the driving control transition module 200, the GPS transceiver, and one or more predetermined maps so as to determine the driving path for the vehicle 105. The autonomous control unit may represent a control system configured to identify, evaluate, and avoid or otherwise negotiate potential obstacles in the environment of the vehicle 105. In general, the autonomous control unit may be configured to control the vehicle 105 for operation without a driver or to provide driver assistance in controlling the vehicle 105. In some embodiments, the autonomous control unit may be configured to incorporate data from the driving control transition module 200, the GPS transceiver, the RADAR, the LIDAR, the cameras, and other vehicle subsystems to determine the driving path or trajectory for the vehicle 105. The vehicle control system 146 may additionally or alternatively include components other than those shown and described.

Occupant interface subsystems 148 may be configured to allow interaction between the vehicle 105 and external sensors, other vehicles, other computer systems, and/or an occupant or user of vehicle 105. For example, the occupant interface subsystems 148 may include standard visual display devices (e.g., plasma displays, liquid crystal displays (LCDs), touchscreen displays, heads-up displays, or the like), speakers or other audio output devices, microphones or other audio input devices, navigation interfaces, and interfaces for controlling the internal environment (e.g., temperature, fan, etc.) of the vehicle 105.

In an example embodiment, the occupant interface subsystems 148 may provide, for instance, means for a user/occupant of the vehicle 105 to interact with the other vehicle subsystems. The visual display devices may provide information to a user of the vehicle 105. The user interface devices can also be operable to accept input from the user or driver via a touchscreen. The touchscreen may be configured to sense at least one of a position and a movement of a user's finger via capacitive sensing, resistance sensing, or a surface acoustic wave process, among other possibilities. The touchscreen may be capable of sensing finger movement in a direction parallel or planar to the touchscreen surface, in a direction normal to the touchscreen surface, or both, and may also be capable of sensing a level of pressure applied to the touchscreen surface. The touchscreen may be formed of one or more translucent or transparent insulating layers and one or more translucent or transparent conducting layers. The touchscreen may take other forms as well.

In other instances, the occupant interface subsystems 148 may provide means for the vehicle 105 to communicate with devices within its environment. The microphone may be configured to receive audio (e.g., a voice command or other audio input) from a user or driver of the vehicle 105. Similarly, the speakers may be configured to output audio to a user of the vehicle 105. In one example embodiment, the occupant interface subsystems 148 may be configured to wirelessly communicate with one or more devices directly or via a communication network. For example, a wireless communication system could use 3G cellular communication, such as CDMA, EVDO, GSM/GPRS, or 4G cellular communication, such as WiMAX or LTE. Alternatively, the wireless communication system may communicate with a wireless local area network (WLAN), for example, using WIFI®. In some embodiments, the wireless communication system 146 may communicate directly with a device, for example, using an infrared link, BLUETOOTH®, or ZIGBEE®. Other wireless protocols, such as various vehicular communication systems, are possible within the context of the disclosure. For example, the wireless communication system may include one or more dedicated short range communications (DSRC) devices that may include public or private data communications between vehicles and/or roadside stations.

Many or all of the functions of the vehicle 105 can be controlled by the computing system 170. The computing system 170 may include at least one data processor 171 (which can include at least one microprocessor) that executes processing instructions stored in a non-transitory computer readable medium, such as the data storage device 172. The computing system 170 may also represent a plurality of computing devices that may serve to control individual components or subsystems of the vehicle 105 in a distributed fashion. In some embodiments, the data storage device 172 may contain processing instructions (e.g., program logic) executable by the data processor 171 to perform various functions of the vehicle 105, including those described herein in connection with the drawings. The data storage device 172 may contain additional instructions as well, including instructions to transmit data to, receive data from, interact with, or control one or more of the vehicle drive subsystem 140, the vehicle sensor subsystem 144, the vehicle control subsystem 146, and the occupant interface subsystems 148.

In addition to the processing instructions, the data storage device 172 may store data such as object processing parameters, training data, roadway maps, and path information, among other information. Such information may be used by the vehicle 105 and the computing system 170 during the operation of the vehicle 105 in the autonomous, semi-autonomous, and/or manual modes.

The vehicle 105 may include a user interface for providing information or instructions to or receiving input from a user, driver, or occupant of the vehicle 105. The user interface may control or enable control of the content and the layout of interactive images that may be displayed on a display device. Further, the user interface may include one or more input/output devices within the set of occupant interface subsystems 148, such as the display device, the speakers, the microphones, or a wireless communication system.

The computing system 170 may control the function of the vehicle 105 based on inputs received from various vehicle subsystems (e.g., the vehicle drive subsystem 140, the vehicle sensor subsystem 144, and the vehicle control subsystem 146), as well as from the occupant interface subsystem 148. For example, the computing system 170 may use input from the vehicle control system 146 in order to control the steering unit to avoid an obstacle detected by the vehicle sensor subsystem 144 and follow a path or trajectory generated by the driving control transition module 200. In an example embodiment, the computing system 170 can be operable to provide control over many aspects of the vehicle 105 and its subsystems.

Although FIG. 1 shows various components of vehicle 105, e.g., vehicle subsystems 140, computing system 170, data storage device 172, and driving control transition module 200, as being integrated into the vehicle 105, one or more of these components could be mounted or associated separately from the vehicle 105. For example, data storage device 172 could, in part or in full, exist separate from the vehicle 105. Thus, the vehicle 105 could be provided in the form of device elements that may be located separately or together. The device elements that make up vehicle 105 could be communicatively coupled together in a wired or wireless fashion.

Additionally, other data and/or content (denoted herein as ancillary data) can be obtained from local and/or remote sources by the in-vehicle control system 150 as described above. The ancillary data can be used to augment, modify, or train the operation of the driving control transition module 200 based on a variety of factors including, the context in which the user is operating the vehicle (e.g., the location of the vehicle, the specified destination, direction of travel, speed, the time of day, the status of the vehicle, etc.), and a variety of other data obtainable from the variety of sources, local and remote, as described herein.

In a particular embodiment, the in-vehicle control system 150 and the driving control transition module 200 can be implemented as in-vehicle components of vehicle 105. In various example embodiments, the in-vehicle control system 150 and the driving control transition module 200 in data communication therewith can be implemented as integrated components or as separate components. In an example embodiment, the software components of the in-vehicle control system 150 and/or the driving control transition module 200 can be dynamically upgraded, modified, and/or augmented by use of the data connection with the mobile devices 132 and/or the network resources 122 via network 120. The in-vehicle control system 150 can periodically query a mobile device 132 or a network resource 122 for updates or updates can be pushed to the in-vehicle control system 150.

Referring now to FIG. 2, a diagram illustrates the components of the driving control transition system 201 of an example embodiment. In the example embodiment, the driving control transition system 201 can be configured to include a driving control transition module 200. As described in more detail below, the driving control transition module 200 serves to effect a smooth and safe automatic transition from autonomous control of the vehicle to driver control. This automatic transition is based on a determination of the driver's capacity or fitness to take control. The determination of driver fitness is based on input sensor data and driver facial feature data 210 received from one or more of the vehicle sensor subsystems 144, including one or more cameras, and processed by an image processing module to identify features of the driver's head and face that may be indicative of the driver's capacity or fitness to take control. The driving control transition module 200 can be configured as one or more software modules executed by the data processor 171 of the in-vehicle control system 150. The driving control transition module 200 can receive the input sensor data and driver facial feature data 210 and produce a vehicle control transition signal 220, which can be used by the autonomous control subsystem of the vehicle control subsystem 146 to cause the autonomous control subsystem to efficiently and safely transition control of the vehicle 105 to the driver (or to prevent such transition of control). As part of the driving control transition processing, the driving control transition module 200 can be configured to work with driving control transition processing configuration parameters 174, which can be used to customize and fine tune the operation of the driving control transition module 200. The driving control transition processing configuration parameters 174 can be stored in a memory 172 of the in-vehicle control system 150.

In the example embodiment, the driving control transition module 200 can be configured to include an interface with the in-vehicle control system 150, as shown in FIG. 1, through which the driving control transition module 200 can send and receive data as described herein. Additionally, the driving control transition module 200 can be configured to include an interface with the in-vehicle control system 150 and/or other ecosystem 101 subsystems through which the driving control transition module 200 can receive ancillary data from the various data sources described above. As described above, the driving control transition module 200 can also be implemented in systems and platforms that are not deployed in a vehicle and not necessarily used in or with a vehicle.

In an example embodiment as shown in FIG. 2, the driving control transition system 201 can be configured to include the driving control transition module 200, as well as other processing modules not shown for clarity. Each of these modules can be implemented as software, firmware, or other logic components executing or activated within an executable environment of the driving control transition system 201 operating within or in data communication with the in-vehicle control system 150. Each of these modules of an example embodiment is described in more detail below in connection with the figures provided herein.

System and Method for Transitioning Between an Autonomous and Manual Driving Mode Based on Detection of a Driver's Capacity to Control a Vehicle

A system and method for transitioning between an autonomous and manual driving mode based on detection of a driver's capacity to control a vehicle is disclosed herein. In particular, the method and system include providing a transition between driving modes in an autonomous vehicle, wherein the modes transition between an autonomous driving mode and a manual driving mode according to detection data corresponding to the user's (e.g., driver's) capacity or fitness to manually control the vehicle. The system may include cameras, sensors, an interactive device, and a computing device. Cameras may be mounted within/on autonomous vehicles to monitor the user's facial features and activities and to collect image and facial feature data. The system may also provide steering wheel sensors to capture real-time steering patterns, as well as localization sensors monitoring the vehicle's location and movement. The system may also provide a microphone or voice collection sensor to obtain the user's voice verification. The system may prompt the user/driver with instructions to perform certain actions. The instructions may be given to the user through an interactive device, for example, a sound device or dashboard display screen. The computing device analyzes the user's responses to interactive prompted instructions with a process for categorizing the user's current activity into predefined classes or states. For example, the predefined classes or states can include sleeping, speaking on the phone, etc. The state classification is performed by an example embodiment based on the user's facial analysis and the user's responses to the prompted instructions or the user's voice response. As a result, the driver's capacity to take control of the vehicle can be evaluated and determined. The user may be allowed to take control of the vehicle based on the evaluation of the driver's capacity as determined by the example embodiment. Other measures for securing the safety of the user and the vehicle may also be taken based on the evaluation of the driver's capacity to control the vehicle.

FIG. 3 illustrates an example of a steering wheel 301 that may be used in an autonomous vehicle in which manual control by a driver can be provided. As shown, the steering wheel 301 can include an inward facing camera 310 and a steering wheel movement or position sensor 312. The inward facing camera 310 can capture images of the head and face of the driver of the vehicle. Using well-known facial analysis techniques, the features of the driver's face and head can be isolated and classified. For example, the position of the driver's head can be determined based on the captured images. Thus, the driving control transition module 200 can determine if the driver is looking forward, sideways, or downward. Based on a pre-configured time parameter, the driving control transition module 200 can determine that the driver is not attentive to the motion or control of the vehicle if the driver does not look forward for the pre-configured amount of time. Using this information, the driving control transition module 200 of an example embodiment can categorize the user/driver's current activity (or lack thereof) into predefined classes or states. For example, the predefined classes or states can include inattentive, sleeping, speaking on the phone, attentive, etc. The state classification can be performed by an example embodiment based on the user/driver's head and facial analysis and the user/driver's responses to prompted instructions. In another example, the eyes of the driver can be isolated from the captured images. Based on a pre-configured time parameter, it can be determined that the driver is not attentive to the motion or control of the vehicle if the driver's eyes are not open for the pre-configured amount of time. As a result, the driver's state classification can be updated by the example embodiment. Using a similar process based on the captured images, the driving control transition module 200 can determine if the driver is using a mobile device, engaged in conversation, or otherwise not attentive to the motion or control of the vehicle. In these cases, the driving control transition module 200 can use images captured from the camera 310 to determine that the driver does not have the capacity to take control of the vehicle. Correspondingly, the driver's state classification can be updated by the example embodiment. A corresponding vehicle control transition signal 220 can be output by the driving control transition module 200. Other vehicle control subsystems 146 can use the vehicle control transition signal 220 to cause the autonomous vehicle control system to take other action as an alternative to enabling manual control by the driver.

In another example embodiment, the driving control transition module 200 can prompt the driver with instructions to take some action or provide a prompted input to demonstrate the driver's capacity to take control of the vehicle. These prompted actions can take a variety of forms. For example, the driving control transition module 200 can activate one or more of the occupant interface subsystems 148 to communicate with the driver (visually or audibly) and prompt the driver to take action or provide an input. For example, the driving control transition module 200 can output a displayed message on a vehicle display device or emit an audible message via a vehicle speaker. The message can prompt the driver to provide a type of input, such as pressing a button on a vehicle touchscreen device, speaking an utterance for reception by a vehicle microphone, or otherwise providing an input that may be detected by one of the vehicle subsystems 140. If no input is received from the driver in response to the prompted instructions for a pre-configured period of time, the driving control transition module 200 can determine that the driver does not have the capacity to take control of the vehicle. Correspondingly, the driver's state classification can be updated by the example embodiment. A corresponding vehicle control transition signal 220 can be output by the driving control transition module 200. Other vehicle control subsystems 146 can use the vehicle control transition signal 220 to cause the autonomous vehicle control system to take other action as an alternative to enabling manual control by the driver. For example, the autonomous vehicle control system can direct the vehicle to safely pull over to the side of the roadway. If the expected input is received from the driver in response to the prompted instructions within the pre-configured period of time, the driving control transition module 200 can determine that the driver does have the capacity to take control of the vehicle and the driver's state classification can be updated in a corresponding manner. In this case, a corresponding vehicle control transition signal 220 can be output by the driving control transition module 200. Other vehicle control subsystems 146 can use the vehicle control transition signal 220 to cause the autonomous vehicle control system to safely and smoothly transition control of the autonomous vehicle to the driver.

In another embodiment, the driver can also provide a prompted input to the driving control transition module 200 by manipulating one or more of the vehicle controls in a specific manner as prompted by the driving control transition module 200. For example, the driving control transition module 200 can prompt the driver to steer straight ahead for a pre-configured time period. The steering wheel movement or position sensor 312 can be used to determine if the driver has complied with the prompted instructions. Other similar instructions can be prompted in alternative embodiments, such as, turn left/right, apply the brakes, accelerate, activate a left/right turn indicator, cycle the headlights, etc. In this manner, the driving control transition module 200 can prompt an action by the driver and verify whether the prompted action was performed using sensor data and/or driver facial feature data. Using any of the techniques described above, the driving control transition module 200 can determine the driver's capacity to take control of the vehicle, update the driver's state classification in a corresponding manner, and output a corresponding vehicle control transition signal 220. Other vehicle control subsystems 146 can use the vehicle control transition signal 220 to cause the autonomous vehicle control system to transition control (or not transition control) of the autonomous vehicle to the driver.

In another embodiment, the user can provide a direct voice verification to demonstrate his/her capacity for driving. For example, the system may use a speaker to require the driver to repeat a predefined sentence or utterance. A microphone or voice collection system may obtain the user's voice response. An analysis module may use the user's voice feature to identity the user's driving capacity, such as whether the user is fatigued, sleeping, impaired, or unable to respond.

Referring now to FIG. 4, a flow diagram illustrates an example embodiment of a system and method 1000 for transitioning between an autonomous and manual driving mode based on detection of a driver's capacity to control a vehicle. The example embodiment can be configured for: receiving sensor data related to a vehicle driver's capacity to take manual control of an autonomous vehicle (processing block 1010); determining, based on the sensor data, if the driver has the capacity to take manual control of the autonomous vehicle, the determining including prompting the driver to perform an action or provide an input (processing block 1020); and outputting a vehicle control transition signal to a vehicle subsystem to cause the vehicle subsystem to take action based on the driver's capacity to take manual control of the autonomous vehicle (processing block 1030).

As used herein and unless specified otherwise, the term “mobile device” includes any computing or communications device that can communicate with the in-vehicle control system 150 and/or the driving control transition module 200 described herein to obtain read or write access to data signals, messages, or content communicated via any mode of data communications. In many cases, the mobile device 130 is a handheld, portable device, such as a smart phone, mobile phone, cellular telephone, tablet computer, laptop computer, display pager, radio frequency (RF) device, infrared (IR) device, global positioning device (GPS), Personal Digital Assistants (PDA), handheld computers, wearable computer, portable game console, other mobile communication and/or computing device, or an integrated device combining one or more of the preceding devices, and the like. Additionally, the mobile device 130 can be a computing device, personal computer (PC), multiprocessor system, microprocessor-based or programmable consumer electronic device, network PC, diagnostics equipment, a system operated by a vehicle 119 manufacturer or service technician, and the like, and is not limited to portable devices. The mobile device 130 can receive and process data in any of a variety of data formats. The data format may include or be configured to operate with any programming format, protocol, or language including, but not limited to, JavaScript, C++, iOS, Android, etc.

As used herein and unless specified otherwise, the term “network resource” includes any device, system, or service that can communicate with the in-vehicle control system 150 and/or the driving control transition module 200 described herein to obtain read or write access to data signals, messages, or content communicated via any mode of inter-process or networked data communications. In many cases, the network resource 122 is a data network accessible computing platform, including client or server computers, websites, mobile devices, peer-to-peer (P2P) network nodes, and the like. Additionally, the network resource 122 can be a web appliance, a network router, switch, bridge, gateway, diagnostics equipment, a system operated by a vehicle 119 manufacturer or service technician, or any machine capable of executing a set of instructions (sequential or otherwise) that specify actions to be taken by that machine. Further, while only a single machine is illustrated, the term “machine” can also be taken to include any collection of machines that individually or jointly execute a set (or multiple sets) of instructions to perform any one or more of the methodologies discussed herein. The network resources 122 may include any of a variety of providers or processors of network transportable digital content. Typically, the file format that is employed is Extensible Markup Language (XML), however, the various embodiments are not so limited, and other file formats may be used. For example, data formats other than Hypertext Markup Language (HTML)/XML or formats other than open/standard data formats can be supported by various embodiments. Any electronic file format, such as Portable Document Format (PDF), audio (e.g., Motion Picture Experts Group Audio Layer 3—MP3, and the like), video (e.g., MP4, and the like), and any proprietary interchange format defined by specific content sites can be supported by the various embodiments described herein.

The wide area data network 120 (also denoted the network cloud) used with the network resources 122 can be configured to couple one computing or communication device with another computing or communication device. The network may be enabled to employ any form of computer readable data or media for communicating information from one electronic device to another. The network 120 can include the Internet in addition to other wide area networks (WANs), cellular telephone networks, metro-area networks, local area networks (LANs), other packet-switched networks, circuit-switched networks, direct data connections, such as through a universal serial bus (USB) or Ethernet port, other forms of computer-readable media, or any combination thereof. The network 120 can include the Internet in addition to other wide area networks (WANs), cellular telephone networks, satellite networks, over-the-air broadcast networks, AM/FM radio networks, pager networks, UHF networks, other broadcast networks, gaming networks, WiFi networks, peer-to-peer networks, Voice Over IP (VoIP) networks, metro-area networks, local area networks (LANs), other packet-switched networks, circuit-switched networks, direct data connections, such as through a universal serial bus (USB) or Ethernet port, other forms of computer-readable media, or any combination thereof. On an interconnected set of networks, including those based on differing architectures and protocols, a router or gateway can act as a link between networks, enabling messages to be sent between computing devices on different networks. Also, communication links within networks can typically include twisted wire pair cabling, USB, Firewire, Ethernet, or coaxial cable, while communication links between networks may utilize analog or digital telephone lines, full or fractional dedicated digital lines including T1, T2, T3, and T4, Integrated Services Digital Networks (ISDNs), Digital User Lines (DSLs), wireless links including satellite links, cellular telephone links, or other communication links known to those of ordinary skill in the art. Furthermore, remote computers and other related electronic devices can be remotely connected to the network via a modem and temporary telephone link.

The network 120 may further include any of a variety of wireless sub-networks that may further overlay stand-alone ad-hoc networks, and the like, to provide an infrastructure-oriented connection. Such sub-networks may include mesh networks, Wireless LAN (WLAN) networks, cellular networks, and the like. The network may also include an autonomous system of terminals, gateways, routers, and the like connected by wireless radio links or wireless transceivers. These connectors may be configured to move freely and randomly and organize themselves arbitrarily, such that the topology of the network may change rapidly. The network 120 may further employ one or more of a plurality of standard wireless and/or cellular protocols or access technologies including those set forth herein in connection with network interface 712 and network 714 described in the figures herewith.

In a particular embodiment, a mobile device 132 and/or a network resource 122 may act as a client device enabling a user to access and use the in-vehicle control system 150 and/or the driving control transition module 200 to interact with one or more components of a vehicle subsystem. These client devices 132 or 122 may include virtually any computing device that is configured to send and receive information over a network, such as network 120 as described herein. Such client devices may include mobile devices, such as cellular telephones, smart phones, tablet computers, display pagers, radio frequency (RF) devices, infrared (IR) devices, global positioning devices (GPS), Personal Digital Assistants (PDAs), handheld computers, wearable computers, game consoles, integrated devices combining one or more of the preceding devices, and the like. The client devices may also include other computing devices, such as personal computers (PCs), multiprocessor systems, microprocessor-based or programmable consumer electronics, network PC's, and the like. As such, client devices may range widely in terms of capabilities and features. For example, a client device configured as a cell phone may have a numeric keypad and a few lines of monochrome LCD display on which only text may be displayed. In another example, a web-enabled client device may have a touch sensitive screen, a stylus, and a color LCD display screen in which both text and graphics may be displayed. Moreover, the web-enabled client device may include a browser application enabled to receive and to send wireless application protocol messages (WAP), and/or wired application messages, and the like. In one embodiment, the browser application is enabled to employ HyperText Markup Language (HTML), Dynamic HTML, Handheld Device Markup Language (HDML), Wireless Markup Language (WML), WMLScript, JavaScript™, EXtensible HTML (xHTML), Compact HTML (CHTML), and the like, to display and send a message with relevant information.

The client devices may also include at least one client application that is configured to receive content or messages from another computing device via a network transmission. The client application may include a capability to provide and receive textual content, graphical content, video content, audio content, alerts, messages, notifications, and the like. Moreover, the client devices may be further configured to communicate and/or receive a message, such as through a Short Message Service (SMS), direct messaging (e.g., Twitter), email, Multimedia Message Service (MMS), instant messaging (IM), internet relay chat (IRC), mIRC, Jabber, Enhanced Messaging Service (EMS), text messaging, Smart Messaging, Over the Air (OTA) messaging, or the like, between another computing device, and the like. The client devices may also include a wireless application device on which a client application is configured to enable a user of the device to send and receive information to/from network resources wirelessly via the network.

The in-vehicle control system 150 and/or the driving control transition module 200 can be implemented using systems that enhance the security of the execution environment, thereby improving security and reducing the possibility that the in-vehicle control system 150 and/or the driving control transition module 200 and the related services could be compromised by viruses or malware. For example, the in-vehicle control system 150 and/or the driving control transition module 200 can be implemented using a Trusted Execution Environment, which can ensure that sensitive data is stored, processed, and communicated in a secure way.

FIG. 5 shows a diagrammatic representation of a machine in the example form of a computing system 700 within which a set of instructions when executed and/or processing logic when activated may cause the machine to perform any one or more of the methodologies described and/or claimed herein. In alternative embodiments, the machine operates as a standalone device or may be connected (e.g., networked) to other machines. In a networked deployment, the machine may operate in the capacity of a server or a client machine in server-client network environment, or as a peer machine in a peer-to-peer (or distributed) network environment. The machine may be a personal computer (PC), a laptop computer, a tablet computing system, a Personal Digital Assistant (PDA), a cellular telephone, a smartphone, a web appliance, a set-top box (STB), a network router, switch or bridge, or any machine capable of executing a set of instructions (sequential or otherwise) or activating processing logic that specify actions to be taken by that machine. Further, while only a single machine is illustrated, the term “machine” can also be taken to include any collection of machines that individually or jointly execute a set (or multiple sets) of instructions or processing logic to perform any one or more of the methodologies described and/or claimed herein.

The example computing system 700 can include a data processor 702 (e.g., a System-on-a-Chip (SoC), general processing core, graphics core, and optionally other processing logic) and a memory 704, which can communicate with each other via a bus or other data transfer system 706. The mobile computing and/or communication system 700 may further include various input/output (I/O) devices and/or interfaces 710, such as a touchscreen display, an audio jack, a voice interface, and optionally a network interface 712. In an example embodiment, the network interface 712 can include one or more radio transceivers configured for compatibility with any one or more standard wireless and/or cellular protocols or access technologies (e.g., 2nd (2G), 2.5, 3rd (3G), 4th (4G) generation, and future generation radio access for cellular systems, Global System for Mobile communication (GSM), General Packet Radio Services (GPRS), Enhanced Data GSM Environment (EDGE), Wideband Code Division Multiple Access (WCDMA), LTE, CDMA2000, WLAN, Wireless Router (WR) mesh, and the like). Network interface 712 may also be configured for use with various other wired and/or wireless communication protocols, including TCP/IP, UDP, SIP, SMS, RTP, WAP, CDMA, TDMA, UMTS, UWB, WiFi, WiMax, Bluetooth©, IEEE 802.11x, and the like. In essence, network interface 712 may include or support virtually any wired and/or wireless communication and data processing mechanisms by which information/data may travel between a computing system 700 and another computing or communication system via network 714.

The memory 704 can represent a machine-readable medium on which is stored one or more sets of instructions, software, firmware, or other processing logic (e.g., logic 708) embodying any one or more of the methodologies or functions described and/or claimed herein. The logic 708, or a portion thereof, may also reside, completely or at least partially within the processor 702 during execution thereof by the mobile computing and/or communication system 700. As such, the memory 704 and the processor 702 may also constitute machine-readable media. The logic 708, or a portion thereof, may also be configured as processing logic or logic, at least a portion of which is partially implemented in hardware. The logic 708, or a portion thereof, may further be transmitted or received over a network 714 via the network interface 712. While the machine-readable medium of an example embodiment can be a single medium, the term “machine-readable medium” should be taken to include a single non-transitory medium or multiple non-transitory media (e.g., a centralized or distributed database, and/or associated caches and computing systems) that store the one or more sets of instructions. The term “machine-readable medium” can also be taken to include any non-transitory medium that is capable of storing, encoding or carrying a set of instructions for execution by the machine and that cause the machine to perform any one or more of the methodologies of the various embodiments, or that is capable of storing, encoding or carrying data structures utilized by or associated with such a set of instructions. The term “machine-readable medium” can accordingly be taken to include, but not be limited to, solid-state memories, optical media, and magnetic media.

The Abstract of the Disclosure is provided to allow the reader to quickly ascertain the nature of the technical disclosure. It is submitted with the understanding that it will not be used to interpret or limit the scope or meaning of the claims. In addition, in the foregoing Detailed Description, it can be seen that various features are grouped together in a single embodiment for the purpose of streamlining the disclosure. This method of disclosure is not to be interpreted as reflecting an intention that the claimed embodiments require more features than are expressly recited in each claim. Rather, as the following claims reflect, inventive subject matter lies in less than all features of a single disclosed embodiment. Thus, the following claims are hereby incorporated into the Detailed Description, with each claim standing on its own as a separate embodiment. 

What is claimed is:
 1. A system comprising: a data processor; and a driving control transition module, executable by the data processor, the driving control transition module being configured to perform a driving control transition operation for an autonomous vehicle, the driving control transition operation being configured to: train a neural network of the driving control transition module using training data received from a remote source and use the trained neural network to modify the operation of the driving control transition module based on a vehicle context in which the autonomous vehicle is operating, the context including a current vehicle location; receive sensor data related to a vehicle driver's capacity to take manual control of an autonomous vehicle and receive sensor data related to the vehicle context, the sensor data including image data from a camera in the vehicle, the driving control transition operation being configured to use the image data to perform facial feature analysis of a face of the driver; classify the vehicle driver into at least one of a plurality of driver state classifications based on the facial feature analysis of the face of the driver; determine, based on the sensor data and the at least one of the plurality of driver state classifications, if the driver has the capacity to take manual control of the autonomous vehicle, wherein the driving control transition operation is configured to prompt the driver to perform an action or provide an input; and output a vehicle control transition signal to a vehicle subsystem to cause the vehicle subsystem to take action based on the driver's capacity to take manual control of the autonomous vehicle, the vehicle control transition signal corresponding to the at least one of the plurality of driver state classifications, the vehicle control transition signal causing the vehicle subsystem to direct the vehicle to safely pull over to the side of a roadway, if the driver is determined to not have the capacity to take manual control of the vehicle.
 2. The system of claim 1 wherein the driving control transition operation being configured to determine, based on the sensor data, if the driver has performed the prompted action or provided the prompted input.
 3. The system of claim 1 wherein the prompted action or input is an instruction for the driver to activate a button or speak an utterance.
 4. The system of claim 1 wherein the prompted action or input is an instruction for the driver to respond to a prompt with a voice utterance, which is analyzed to determine the driver's capacity to take manual control of the autonomous vehicle.
 5. The system of claim 1 wherein the prompted action or input is an instruction for the driver to manipulate a vehicle control in a prompted manner.
 6. A method comprising: training a neural network of a driving control transition module using training data received from a remote source and using the trained neural network for modifying the operation of the driving control transition module based on a vehicle context in which an autonomous vehicle is operating, the context including a current vehicle location; receiving sensor data related to a vehicle driver's capacity to take manual control of an autonomous vehicle and receiving sensor data related to the vehicle context, the sensor data including image data from a camera in the vehicle; using the image data to perform facial feature analysis of a face of the driver; classifying the vehicle driver into at least one of a plurality of driver state classifications based on the facial feature analysis of the face of the driver; determining, based on the sensor data and the at least one of the plurality of driver state classifications, if the driver has the capacity to take manual control of the autonomous vehicle, the determining including prompting the driver to perform an action or provide an input; and outputting a vehicle control transition signal to a vehicle subsystem to cause the vehicle subsystem to take action based on the driver's capacity to take manual control of the autonomous vehicle, the vehicle control transition signal corresponding to the at least one of the plurality of driver state classifications, the vehicle control transition signal causing the vehicle subsystem to direct the vehicle to safely pull over to the side of a roadway, if the driver is determined to not have the capacity to take manual control of the vehicle.
 7. The method of claim 6 wherein the determining including determining, based on the sensor data, if the driver has performed the prompted action or provided the prompted input.
 8. The method of claim 6 wherein the prompted action or input is an instruction for the driver to activate a button or speak an utterance.
 9. The method of claim 6 wherein the prompted action or input is an instruction for the driver to respond to a prompt with a voice utterance, which is analyzed to determine the driver's capacity to take manual control of the autonomous vehicle.
 10. The method of claim 6 wherein the prompted action or input is an instruction for the driver to manipulate a vehicle control in a prompted manner.
 11. A non-transitory machine-useable storage medium embodying instructions which, when executed by a machine, cause the machine to: train a neural network of a driving control transition module using training data received from a remote source and use the trained neural network to modify the operation of the driving control transition module based on a vehicle context in which an autonomous vehicle is operating, the context including a current vehicle location; receive sensor data related to a vehicle driver's capacity to take manual control of an autonomous vehicle and receive sensor data related to the vehicle context, the sensor data including image data from a camera in the vehicle; use the image data to perform facial feature analysis of a face of the driver; classify the vehicle driver into at least one of a plurality of driver state classifications based on the facial feature analysis of the face of the driver; determine, based on the sensor data and the at least one of the plurality of driver state classifications, if the driver has the capacity to take manual control of the autonomous vehicle, the instructions being further configured to prompt the driver to perform an action or provide an input; and output a vehicle control transition signal to a vehicle subsystem to cause the vehicle subsystem to take action based on the driver's capacity to take manual control of the autonomous vehicle, the vehicle control transition signal corresponding to the at least one of the plurality of driver state classifications, the vehicle control transition signal causing the vehicle subsystem to direct the vehicle to safely pull over to the side of a roadway, if the driver is determined to not have the capacity to take manual control of the vehicle.
 12. The non-transitory machine-useable storage medium of claim 11 wherein the instructions are further configured to determine, based on the sensor data, if the driver has performed the prompted action or provided the prompted input.
 13. The non-transitory machine-useable storage medium of claim 11 wherein the prompted action or input is an instruction for the driver to activate a button or speak an utterance.
 14. The non-transitory machine-useable storage medium of claim 11 wherein the prompted action or input is an instruction for the driver to manipulate a vehicle control in a prompted manner. 